Skip to content

build(deps): bump the actions group across 1 directory with 5 updates#255

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/github_actions/actions-db6f87fd66
Open

build(deps): bump the actions group across 1 directory with 5 updates#255
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/github_actions/actions-db6f87fd66

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jan 12, 2026 •
edited
Loading

Bumps the actions group with 5 updates in the / directory:

Package From To
actions/checkout 4.2.2 6.0.2
sigstore/cosign-installer 3.9.2 4.1.1
azure/setup-helm 4.3.0 5.0.0
nais/fasit-deploy 2 3
dependabot/fetch-metadata 2.4.0 3.1.0

Updates actions/checkout from 4.2.2 to 6.0.2

Release notes

Sourced from actions/checkout's releases.

v6.0.2

What's Changed

Full Changelog: actions/checkout@v6.0.1...v6.0.2

v6.0.1

What's Changed

Full Changelog: actions/checkout@v6...v6.0.1

v6.0.0

What's Changed

Full Changelog: actions/checkout@v5.0.0...v6.0.0

v6-beta

What's Changed

Updated persist-credentials to store the credentials under $RUNNER_TEMP instead of directly in the local git config.

This requires a minimum Actions Runner version of v2.329.0 to access the persisted credentials for Docker container action scenarios.

v5.0.1

What's Changed

Full Changelog: actions/checkout@v5...v5.0.1

v5.0.0

What's Changed

⚠️ Minimum Compatible Runner Version

v2.327.1
Release Notes

... (truncated)

Changelog

Sourced from actions/checkout's changelog.

Changelog

v6.0.2

v6.0.1

v6.0.0

v5.0.1

v5.0.0

v4.3.1

v4.3.0

v4.2.2

v4.2.1

v4.2.0

v4.1.7

v4.1.6

... (truncated)

Commits

Updates sigstore/cosign-installer from 3.9.2 to 4.1.1

Release notes

Sourced from sigstore/cosign-installer's releases.

v4.1.1

What's Changed

Full Changelog: sigstore/cosign-installer@v4.1.0...v4.1.1

v4.1.0

What's Changed

We recommend updating as soon as possible as this includes bug fixes for Cosign. We also recommend removing with: cosign-release and strongly discourage using cosign-release unless you have a specific reason to use an older version of Cosign.

Full Changelog: sigstore/cosign-installer@v4.0.0...v4.1.0

v4.0.0

What's Changed?

Note: You must upgrade to cosign-installer v4 if you want to install Cosign v3+. You may still install Cosign v2.x with cosign-installer v4.

In version v3+, using cosign sign-blob requires adding the --bundle flag which may require you to update your signing command.

  • Add support for Cosign v3 releases (#201)

v3.10.1

What's Changed?

Note: cosign-installer v3.x cannot be used to install Cosign v3.x. You must upgrade to cosign-installer v4 in order to use Cosign v3.

Note: This is planned to be the final release of Cosign v2, though we will cut new releases for any critical security or bug fixes. We recommend transitioning to Cosign v3.

  • Bump default Cosign to v2.6.1 (#203)

v3.10.0

What's Changed

Full Changelog: sigstore/cosign-installer@v3.9.2...v3.10.0

Commits

Updates azure/setup-helm from 4.3.0 to 5.0.0

Release notes

Sourced from azure/setup-helm's releases.

v5.0.0

Changed

v4.3.1

Changed

Added

Changelog

Sourced from azure/setup-helm's changelog.

Change Log

[5.0.0] - 2026-03-23

Changed

[4.3.1] - 2025-08-12

Changed

Added

[4.3.0] - 2025-02-15

  • #152 feat: log when restoring from cache
  • #157 Dependencies Update
  • #137 Add dependabot

[4.2.0] - 2024-04-15

... (truncated)

Commits

Updates nais/fasit-deploy from 2 to 3

Commits
  • 6e5772c Merge pull request #2 from nais/more_docs
  • 06d5e7d doc: how to target i Feature.yaml
  • 64563ac fix: check if input is blank
  • 48d6dd0 fix: check if allenvs is true
  • 792fd7d feat: resolve target from helm chart when not set
  • 8237137 feat: add input for wait
  • c2ba888 fix: set missing env var
  • 9d9b0d5 feat: add skip-ci argument for the action
  • e845f0a fix: skip default to require the presence of target in the workflow
  • 2cb13e2 feat: modify to work with the new deployment endpoint
  • See full diff in compare view

Updates dependabot/fetch-metadata from 2.4.0 to 3.1.0

Release notes

Sourced from dependabot/fetch-metadata's releases.

v3.1.0

What's Changed

New Contributors

Full Changelog: dependabot/fetch-metadata@v3...v3.1.0

v3.0.0

The breaking change is requiring Node.js version v24 as the Actions runtime.

What's Changed

... (truncated)

Commits
  • 25dd0e3 v3.1.0 (#692)
  • e073f50 Merge pull request #705 from dependabot/dependabot/npm_and_yarn/hono-4.12.14
  • 0670e16 build(deps-dev): bump hono from 4.12.12 to 4.12.14
  • 7a7fe10 Merge pull request #702 from dependabot/dependabot/npm_and_yarn/dependencies-...
  • 5168191 Updating dist build
  • 23882e1 build(deps): bump @​actions/github in the dependencies group
  • 1072469 Merge pull request #701 from dependabot/dependabot/github_actions/actions/cre...
  • 43f8a00 build(deps): bump actions/create-github-app-token from 3.0.0 to 3.1.1
  • b4d904a Merge pull request #703 from dependabot/dependabot/npm_and_yarn/globals-17.5.0
  • c8046bb build(deps-dev): bump globals from 17.4.0 to 17.5.0
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code labels Jan 12, 2026
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions-db6f87fd66 branch from 948571f to 6b97cbe Compare January 26, 2026 09:27
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions-db6f87fd66 branch from 6b97cbe to 0c30fc8 Compare February 23, 2026 09:14
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions-db6f87fd66 branch 2 times, most recently from 85c7e2e to 682adb0 Compare March 16, 2026 09:05
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions-db6f87fd66 branch from 682adb0 to 7eaf99c Compare March 23, 2026 09:04
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions-db6f87fd66 branch from 7eaf99c to 4a015f7 Compare March 30, 2026 09:08
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions-db6f87fd66 branch from 4a015f7 to 0fc4c7d Compare April 20, 2026 09:43
@dependabot
build(deps): bump the actions group across 1 directory with 5 updates
d14584b 
Bumps the actions group with 5 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [actions/checkout](https://github.com/actions/checkout) | `4.2.2` | `6.0.2` |
| [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) | `3.9.2` | `4.1.1` |
| [azure/setup-helm](https://github.com/azure/setup-helm) | `4.3.0` | `5.0.0` |
| [nais/fasit-deploy](https://github.com/nais/fasit-deploy) | `2` | `3` |
| [dependabot/fetch-metadata](https://github.com/dependabot/fetch-metadata) | `2.4.0` | `3.1.0` |



Updates `actions/checkout` from 4.2.2 to 6.0.2
- [Release notes](https://github.com/actions/checkout/releases)
- [Changelog](https://github.com/actions/checkout/blob/main/CHANGELOG.md)
- [Commits](actions/checkout@11bd719...de0fac2)

Updates `sigstore/cosign-installer` from 3.9.2 to 4.1.1
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](sigstore/cosign-installer@d58896d...cad07c2)

Updates `azure/setup-helm` from 4.3.0 to 5.0.0
- [Release notes](https://github.com/azure/setup-helm/releases)
- [Changelog](https://github.com/Azure/setup-helm/blob/main/CHANGELOG.md)
- [Commits](Azure/setup-helm@b9e5190...dda3372)

Updates `nais/fasit-deploy` from 2 to 3
- [Commits](nais/fasit-deploy@v2...v3)

Updates `dependabot/fetch-metadata` from 2.4.0 to 3.1.0
- [Release notes](https://github.com/dependabot/fetch-metadata/releases)
- [Commits](dependabot/fetch-metadata@v2.4.0...v3.1.0)

---
updated-dependencies:
- dependency-name: actions/checkout
  dependency-version: 6.0.1
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: azure/setup-helm
  dependency-version: 4.3.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: actions
- dependency-name: dependabot/fetch-metadata
  dependency-version: 2.5.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: actions
- dependency-name: nais/fasit-deploy
  dependency-version: '3'
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
- dependency-name: sigstore/cosign-installer
  dependency-version: 4.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: actions
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/github_actions/actions-db6f87fd66 branch from 0fc4c7d to d14584b Compare April 27, 2026 09:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file github_actions Pull requests that update GitHub Actions code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

0 participants